Privacy Policy

1. Introduction

This Privacy Policy applies to the use of the ExDigital Pro platform, operated by Extensus, headquartered in Luanda, Angola.

By using our services, you agree to the collection and use of information in accordance with this policy. We recommend that you read this document carefully.

2. Key Definitions

• Personal Data: Any information that can identify you directly or indirectly.
• Sensitive Data: Information about racial origin, political opinions, religious beliefs, health, biometric or genetic data.
• Data Subject: You, the person to whom the personal data refers.
• Controller: Extensus, the entity that determines the purposes and means of processing data.
• Processing: Any operation performed with personal data (collection, storage, use, sharing, deletion).

3. What Data We Collect

3.1. Data You Provide Directly

When you register and use our platform, we collect:

Category	Data Collected	Purpose
Registration	Full name, email, phone, password, address	Create and manage your account
Profile	Profile photo, company, NIF, birth date	Personalization and verification
Events	Event name, date, location, description, budget	Manage your events
Guests	Guest names, phones, emails	Invitation and check-in management
Payment	Transaction data, proofs	Process payments
Suppliers	Name, company, contacts, documents	Service coordination

3.2. Automatically Collected Data

When you access the platform, we automatically collect:

• Browsing Data: IP address, browser type, operating system
• Usage Data: Pages visited, session time, clicks, actions performed
• Device Data: Device type, screen resolution, language
• Cookies: Unique identifiers to improve your experience
• Access Logs: Date, time and actions performed in the system

3.3. Third-Party Data

We may receive data from:

• Payment Processors: Transaction confirmations (Multicaixa, PayPal)
• Social Networks: If you choose to log in via social networks (future)

4. How We Use Your Data

We use your personal data to:

4.1. Service Provision

• Create and manage your user account
• Process and activate events after payment
• Generate invites and unique QR Codes
• Enable guest check-in
• Coordinate suppliers and teams
• Generate reports and statistics
• Export data in CSV format

4.2. Communication

• Send notifications about your event
• Confirm payments and activations
• Respond to your questions and requests
• Send important system updates
• Marketing (only with your consent)

4.3. Improvements and Security

• Analyze platform usage for improvements
• Detect and prevent fraud
• Ensure system security
• Comply with legal obligations

5. Data Sharing

5.1. When We Share

Your data may be shared in the following situations:

• Registered Suppliers: Event information is shared with suppliers you add to your event
• Payment Processors: Data necessary to process transactions (Multicaixa, PayPal)
• Service Providers: Companies that assist us (hosting, email, analytics)
• Legal Authorities: When required by law or court order
• Business Transfer: In case of merger, acquisition or sale of the company

5.2. Protections When Sharing

When we share data:

• Only the minimum necessary is shared
• We establish confidentiality agreements
• We require appropriate security measures
• You are notified when appropriate

6. Storage and Security

6.1. Where We Store

Your data is stored on secure servers located in trusted datacenters. We use providers that follow international security standards.

6.2. Security Measures

We implement technical and organizational measures to protect your data:

• Encryption: Sensitive data is encrypted (HTTPS, SSL/TLS)
• Passwords: Stored with cryptographic hash (bcrypt)
• Firewall: Protection against unauthorized access
• Backups: Daily automatic backups
• Monitoring: Access logs and suspicious activity
• Restricted Access: Only authorized staff access data
• Testing: Regular security audits

6.3. How Long We Keep Data

We keep your data for the time necessary to:

• Active Account: While you keep your account
• Legal Obligations: Up to 5 years after closure (tax legislation)
• After Deletion: Data is removed within 30 days, except backups
• Anonymized Data: May be kept indefinitely for statistics

7. Your Rights

In line with best data protection practices, you have the following rights:

7.1. Access

You may request a copy of all personal data we hold about you.

7.2. Correction

You can update your personal data at any time through profile settings or by requesting support.

7.3. Deletion

You may request deletion of your account and related data. Some data may be kept for legal obligations.

7.4. Portability

You can export your data in CSV format through the platform.

7.5. Objection

You can object to the use of your data for direct marketing at any time.

7.6. Withdrawal of Consent

When processing is based on consent, you can withdraw it at any time.

7.7. How to Exercise Your Rights

To exercise any of these rights:

• Email: privacidade@exdigitalpro.ao
• Through your account settings
• Contact form on our website

We will respond within 15 business days. We may request proof of identity to protect your data.

8. Cookies and Similar Technologies

8.1. What Are Cookies

Cookies are small text files stored on your device when you visit our platform.

8.2. How We Use Cookies

We use cookies to:

• Essential: Keep you logged in, remember preferences
• Analytics: Understand how you use the platform
• Functionality: Improve features and personalization
• Marketing: Display relevant content (with consent)

8.3. Manage Cookies

You can control and delete cookies through your browser settings. Note that disabling cookies may affect platform functionality.

9. Minors

Our platform is not directed at minors under 18. We do not knowingly collect data from minors. If you are under 18, do not use our services without authorization from a legal guardian.

If we identify that we collected data from a minor without appropriate consent, we will take steps to delete that information.

10. International Data Transfers

Your data is primarily processed and stored in Angola. In some cases, we may transfer data to other countries for processing (e.g., backup servers, international payment processors).

When we transfer data internationally, we ensure that:

• The destination country offers adequate protection
• Data protection contracts are in place
• Technical security measures are applied

11. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legislation.

When we make significant changes:

• You will be notified by email
• A notice will be displayed on the platform
• The "Last Update" date will be modified
• You will have 30 days to review the changes

We recommend reviewing this policy regularly.

12. Security Incidents

Despite our best security practices, incidents may occur. If a data breach could affect your privacy:

• You will be notified within 72 hours after discovery
• Competent authorities will be informed when necessary
• Corrective measures will be implemented immediately
• You will receive guidance on how to protect yourself

13. Data Protection Officer

For specific questions about privacy and data protection, contact our Data Protection Officer (DPO):

• Email: privacidade@exdigitalpro.ao
• General Email: contato@exdigitalpro.ao
• Phone: +244 948 005 566
• Address: Extensus - Luanda, Angola

14. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Contract Performance: To provide the contracted services
• Consent: When you explicitly authorize us
• Legal Obligation: To comply with laws and regulations
• Legitimate Interest: To improve services and prevent fraud

---